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DETAILED ACTION 

This Office Action is in response to an Amendment filed July 19, 2007. Claims 1,3-7,9,12-14,16- 
20,22,25-31,33-41 are currently pending. Any rejection not set forth below has been overcome by the 
current Amendment. 

Information Disclosure Statement 

1. The information disclosure statement (IDS) submitted on August 7, 2007 was filed after the 
mailing date of the Final Office Action on April 9, 2007. The submission is in compliance with the 
provisions of 37 CFR 1.97. Accordingly, the information disclosure statement is being considered by the 
examiner. 

Claim Rejections - 35 USC §103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1,3,6-7,12-14,16-20,25-31,34,38-40 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Krishnan et al. (US 6,075,863), and further in view of Chi (6,006.329). 

As per claim 1. Knshnan discloses a network adapter system, comprising: 
a processor positioned on a network adapter coupled between an end-point computer and a 
network (see column 2, lines 33-39, where network adapter is considered the software-controlled 
modem), the network adapter capable of being installed on the end-point computer (see column 2, lines 
44-50); 

wherein the processor is adapted for virus scanning and content scanning of network traffic 
transmitted between the end-point computer and the network, the content scanning including scanning for 
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unwanted content other than viruses (see column 5, lines 16-28, where processor executes applets to 
scan incoming data and content is considered "junk e-mail"); 

wherein the processor is capable of being user-configured (see Krishnan column 5, lines 33-35 
and lines 55-57, where a user can buy an applet that is used to control modem (i.e. the modem 
processor)); 

wherein the processor is capable of determining whether received packets are of interest (see 
Krishnan column 5, lines 16-23, where packets of interest are considered viruses, etc.),. passing received 
packets that are not of interest to the end-point computer (see Krishnan column 5, lines 16-23, i.e. if not a 
virus than packets is not discarded), and scanning received packets that are of interest (see Krishnan 
column 5, lines 16-23, i.e. scanning packets for viruses). 

Although the system disclosed by Krishnan shows substantial features of the claimed invention 
(discussed above), it fails to disclose that the virus scanning utilizes virus signature files and that the virus 
signature files are stored on non-volatile solid state memory on the network adapter. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Krishnan, as evidenced by Chi. 

In an analogous art, Chi discloses scanning data streams for viruses (see Abstract) using virus 
signature files to detect known viruses (see column 3, lines 47-65). 

Given the teaching of Chi, a person having ordinary skill in the art would have readily recognized 
the desirability and advantages of modifying Krishnan by employing virus signatures, such as disclosed 
by Chi, in order to detect the viruses without having to store the entire virus code. 

In considering the virus signature files being stored on non-volatile solid state memory on the 
network adapter, Krishnan shows storing virus detection applets and program code implementing a virtual 
machine for execution of programs in ROM and battery backed RAM for long term storage (see column 2, 
line 65 - column 3, line 12). Therefore it would be obvious to also store the virus signature files with the 
applets and program code in order for the applets executing the virus scan to use the signatures to detect 
viruses. 
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As per claim 3, Krishnan in view of Chi further disclose that the processor is capable of being 
user-configured locally (see Krishnan column 3, lines 24-26) 

As per claim 4, Krishnan in view of Chi further disclose that the processor is capable of being 
user-configured remotely via a network connection with the network adapter (see Krishnan column 3, 
lines 36-37). 

As per claim 6, Krishnan in view of Chi further disclose that the manner in which the scanning is 
performed is capable of being user-configured (see Krishnan column 5, lines 16-32). 

As per claim 7, Krishnan in view of Chi further disclose that the settings of the network adapter 
are capable of being user-configured (see Krishnan column 5, lines 33-35). 

As per claim 12, Krishnan in view of Chi further disclose that the processor is capable of denying 
received packets that fail the scan (see Krishnan column 5, lines 16-23). 

As per claim 13, Krishnan in view of Chi further disclose that the scan is performed based on user 
settings (see Krishnan column 3, lines 2-6). 

As per claims 14,27,28,. Krishnan in view of Chi discloses a method for scanning network traffic 
on a network adapter, comprising: 

receiving packets at a network adapter including a processor positioned thereon, the network 
adapter being capable of being installed on an end-point computer (see Krishnan column 2, lines 33-39, 
where network adapter is considered the software-controlled modem); 

virus scanning and content scanning of the packets utilizing the processor, the content scanning 
including scanning for unwanted content other than viruses (see Krishnan column 5, lines 16-28, where 
processor executes applets to scan incoming data and content is considered "junk e-mail"); and 

conditionally taking security measures if the packets fail the scan (see Krishnan column 5, lines 

16-23); 

wherein the virus scanning utilizes virus signature files to scan for known types of malicious 
programs or data (see Chi column 3, lines 47-65); 
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wherein the virus signature files are stored on non-volatile solid state memory on the network 
adapter (please see discussion above regarding solid state memory, i.e. program files are stored in ROM, 
therefore it would be obvious to store the signature files there as well); 

wherein the processor is capable of being user-configured (see Krishnan column 5, lines 33-35 
and lines 55-57, where a user can buy an applet that is used to control modem (i.e. the modem 
processor)); 

wherein the processor is capable of determining whether received packets are of interest (see 
Krishnan column 5, lines 16-23, where packets of interest are considered viruses, etc.), passing received 
packets that are not of interest to the end-point computer (see Krishnan column 5, lines 16-23, i.e. if not a 
virus than packets is not discarded), and scanning received packets that are of interest (see Krishnan 
column 5, lines 16-23, i.e. scanning packets for viruses). 

As per claims 16-20,25-26, see rejection for claims 2-8,10-13 above. 

As per claim 29, Krishnan in view of Chi disclose a network adapter system, comprising: 

a processor positioned on a network adapter coupled between a computer and a network, the 
processor including a packet assembly module, random access memory (RAM), and a scanner module 
(see column 2, lines 56-65, where it is implied if not inherent that there is a packet assembly module in 
order to receive data from the outside see column 5, lines 16-18 for scanner module); 

a user interface driver for identifying network traffic of interest transmitted between the computer 
and the network (see Krishnan column 5, lines 24-31); 

wherein the processor is adapted for discerning and virus scanning and content scanning of 
network traffic of interest transmitted between the computer and the network (see Krishnan column 5, 
lines 16-31); 

wherein the virus scanning utilizes virus signature files to scan for known types of malicious 
programs or data (see Chi column 3, lines 47-65); 

wherein the virus signature files are stored on non-volatile solid state memory on the network 
adapter (please see discussion above regarding solid state memory, i.e. program files are stored in ROM, 
therefore it would be obvious to store the signature files there as well); 
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wherein the network adapter receives the network traffic (see Krishnan column 5, lines 16-23); 

wherein the processor is capable of being user-configured (see Krishnan column 5, lines 33-35 
and lines 55-57, where a user can buy an applet that is used to control modem (i.e. the modem 
processor)); 

wherein the processor is capable of determining whether received packets are of interest (see 
Krishnan column 5, lines 16-23, where packets of interest are considered viruses, etc.), passing received 
packets that are not of interest to the end-point computer (see Krishnan column 5, lines 16-23, i.e. if not a 
virus than packets is not discarded), and scanning received packets that are of interest (see Krishnan 
column 5, lines 16-23. i.e. scanning packets for viruses). 

As per claim 30, Krishnan in view of Chi further disclose that the content scanning enforces 
operational policies of an organization (see Krishnan column 5, lines 24-30). 

As per claims 31 ,40, Krishnan in view of Chi further disclose that the policies include detecting 
entities selected from the group consisting of harassing content, pornographic content, junk e-mails, and 
misinformation (see Krishnan column 5, lines 24-30). 

As per claim 34, Krishnan in view of Chi further disclose that the packets that are of interest 
include executable files (see Krishnan column 5, lines 16-23). 

As per claim 38, Krishnan in view of Chi further disclose that the network adapter includes a cable 
modem adapter (see column 6, lines 36-45). 

As per claim 39, Krishnan in view of Chi further disclose that the network adapter includes a 
broadband adapter (i.e. cable modem). 

4. Claims 9 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over Krishnan in 
view of Chi as applied to claims 1,14 above, and further in view of Makinson et al. (US 7,023,861), herein 
referred to as Makinson. 
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As per claims 9,22, although the system disGlosed by Krishnan in view of Chi shows substantial 
features of the claimed invention (discussed above), it fails to disclose that the packets of interest are 
based on an associated protocol. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Krishnan in view of Chi. as evidenced by Makinson. 

In an analogous art, Makinson discloses a bridge with a built in scanner connected to an end-user 
computer (see Fig. 5), where the scanning of packets may be selected based on the certain types of 
protocols (see column 4, lines 50-57). 

Given the teaching of Makinson. a person having ordinary skill in the art would have readily 
recognized the desirability and advantages of modifying Krishnan in view of Chi by employing protocol 
specific scanning, such as disclosed by Makinson, in order to relieve the processor from scanning 
unnecessary packets. 

5. Claims 5,18,33 are rejected under 35 U.S.C. 103(a) as being unpatentable over Krishnan in view 
of Chi as applied to claims 1.14 above, and further in view of Bonomo et al. (US 6,658,562), herein 
referred to as Bonomo. 

Although the system disclosed by Krishnan in view of Chi shows substantial features of the 
claimed invention (discussed above), it fails to disclose that memory is user protected by configuring a 
network adapter BIOS with a password that only a user can change. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Krishnan in view of Chi, as evidenced by Bonomo. 

In an analogous art, Bonomo discloses a system for setting different BIOS configurations stored 
in a memory device (see Abstract). Further showing setting a password to view information in a BIOS 
setup program or to change configuration (see column 4. lines 1 1-21 and 30-41). 

Given the teaching of Bonomo, a person having ordinary skill in the art would have readily 
recognized the desirability and advantages of modifying Krishnan in view of Chi by employing a password 
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protected BIOS, such as disclosed by Bonomo, in order to prevent unwanted users from changing 
settings without authorization. 

6. Claims 35-36, are rejected under 35 U.S.C. 103(a) as being unpatentable over Krishnan in view 
of Chi. 

As per claim 35,36; Krishnan in view of Chi does not expressly disclose that the network adapter 
includes a Peripheral Component Interconnect (PCI) card and/or an Industry Standard Architecture (ISA) 
card. However, Krishnan does disclose that the adapter can be an add-in card for installation in an 
expansion slot of a computer comprising an expansion bus interface (see column 2, lines 47-50). At the 
time of the invention, a person having ordinary skill in the art would have recognized that PCI and ISA are 
commonly used and well known expansion bus interfaces. Therefore it would have been obvious to 
make network adapters for both PCI and ISA in order to provide an adapter compatible with most 
computers. 

7. Claims 35-37 is rejected under 35 U.S.C. 103(a) as being unpatentable over Krishnan in view of 
Chi as applied to claim 1 above, and further in view of Sridhar et al. (US 5,799,064), herein referred to as 
Sridhar. 

As per claims 35,36 although the system disclosed by Krishnan shows substantial features of the 
claimed invention (discussed above), it fails to disclose that the network adapter includes a Peripheral 
Component Interconnect (PCI) card and/or an Industry Standard Architecture (ISA) card. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Krishnan in view of Chi, as evidenced by Sridhar 

In an analogous art. Sridhar discloses an apparatus interfacing between a communication 
channel and a processor for data transmission and reception (see Abstract) further showing that the 
apparatus may be connected to a bus such as an ISA or PCI bus (see column 3, line 63 - column 4. line 
2). 
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Given the teaching of Sridhar, a person having ordinary skill in the art would have readily 
recognized the desirability and advantages of modifying Krishnan by employing a network adapter 
including a PCI and/or ISA card, such as disclosed by Chi, in order to connect to the bus of the end-point 
computer. 

As per claim 37, Krishnan in view of Chi in view of Sridhar further disclose that the network 
adapter includes an Integrated Services Digital Network (ISDN) adapter (see Sridhar column 4, lines 1 1- 
19). 

8. Claim 41 is rejected under 35 U.S.C. 103(a) as being unpatentable over Krishnan in view of Chi 
as applied to claim 1 above, and further in view of Horvitz et al. (US 6,161,130), herein referred to as 

Horvitz.. 

Although the system disclosed by Krishnan shows unwanted content includes junk e-mails and 
misinformation (see column 5, lines 24-25 for junk e-mail and column 5, lines 16-18, where Trojan horses 
are considered misinformation), it fails to disclose harassing content and pornographic content. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Krishnan in view of Chi, as evidenced by Horvitz. 

In an analogous art, Horvitz discloses a system that detects electronic mail messages that the 
recipient is likely to consider junk (see Abstract). Further disclosing that the unwanted messages include 
harassing content and pornographic content (see column 9, lines 44-51, where harassing content is 
considered abusive or insulting messages). 

Given the teaching of Horvitz, a person having ordinary skill in the art would have readily 
recognized the desirability and advantages of modifying Krishnan in view of Chi by employing a harassing 
content and pornographic content filter, such as disclosed by Horvitz, in order to keep the incoming data 
safe for users. 
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Response to Arguments 

9. Applicant's arguments, see page 15, third paragraph, filed July 19, 2007, with respect to the 
rejection(s) of claim(s) 41 under 35 U.S.C. 103(a) have been fully considered and are persuasive. 
Therefore, the rejection has been withdrawn. However, upon further consideration, a new ground(s) of 
rejection is made in view of Horvitz et al. (US 6,161,130). 

10. Applicant's other arguments filed July 19, 2007 have been fully considered but they are not 
persuasive. 

(A) Applicant contends that Krishnan fails to teach a processor including a packet assembly module. 

In considering (A), the Examiner respectfully disagrees. Krishnan discloses that applets executed 
on the modem may be used to scan incoming data for hazardous programs (see column 5, lines 16-18). 
Krishnan also shows that the modem can send and receive packet data (see column 6, lines 39-42). In 
order to receive packets and determine which application to pass the information to, it is absolutely 
inherent that a packet assembly module exists to figure out where to deliver the packets once they are 
received by the modem. If there were no packet assembly module, pieces of data would be received by 
the modem without any direction to go after they have been received. Furthermore, in order to scan for 
hazardous programs, an assembly module must exist in order to piece the packet data together and 
decide whether the information being received is hazardous. Finally, data is coming into the modem from 
all over the network. It is up to the modem to assemble the packet data in order to receive only the 
packets that have been requested by the user, or else data that was intended for another computer will 
end up being processed by the modem. If the Applicants packet assembly module has a special function 
that is different then a packet assembly module inherent in a modem, the Examiner invites the Applicant 
to amend the claim to reflect the functionality of the packet assembly module. The Examiner is reading 
the packet assembly module within the broadest reasonable interpretation. To the Examiner the packet 
assembly module is merely an interface that receives packets and passes them onto the higher layers of 
communication. 
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(B) Applicant contends that Krishnan in view of Chi fails to disclose that the virus signature files are 
stored on non-volatile solid state memory on the network adapter 

In considering (B), the Examiner respectfully disagrees. It is clear that Krishnan teaches that an 
applet stored in non-volatile solid state memory is used for scanning viruses (see column 5, lines 16-24, 
describing how the applet scans for viruses and column 2, line 67 - column 3, line 2, describing how the 
applets are stored in battery backed RAM (i.e. non-volatile solid state memory)). Chi was used to show 
that it is obvious to scan for virus signature files to identify potential viruses (see column 3, lines 47-65) so 
that viruses could easily be detected without having to store the entire virus code. The combined system 
of Krishnan and Chi now has an applet stored in non-volatile solid state memory that scans for viruses 
using virus signature files. Since the applet is performing the scanning, it is obvious that the virus 
signature files are a part of the applet program and stored wherever the applet is installed, in this case 
battery backed RAM (i.e. non volatile solid state memory). 

(C) Applicant contends that Krishnan fails to disclose that the processor is capable of being user- 
configured. 

In considering (C), the Examiner respectfully disagrees. It is clear that Krishnan shows a user 
can purchase an applet to control the modem (see column 5, lines 33-35 and lines 55-57. where a user 
can buy an applet that is used to control modem (i.e. the modem processor)); It is unclear if the claim 
limitation means a user can configure the processor by removing/installing jumpers, or soldering new 
wires to cause the processor to perform something different, or installing programs to cause the 
processor to perform a new function, etc. The Examiner believes that Krishnan shows a user can 
configure the processor by installing new applets that cause the processor to perform a new task (e.g. a 
new virus scanning program). 

(D) Applicant contends that Krishnan fails to disclose that the processor is capable of determining 
whether received packets are of interest, wherein the processor is capable of passing received packets 
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that are not of interest to the end-point computer, and wherein the processor is capable of scanning 
received packets that are of interest. 

In considering (D), the Examiner respectfully disagrees. Krishnan teaches that the packets are 
scanned for potentially hazardous programs. The Examiner believes that the "packets of interest" are 
considered packets that contain the potentially hazardous programs. While the processor performs the 
scanning, the packets of interests are determined and either discarded or triggers an alert for the user 
that a potential rogue program is found (see column 5, lines 16-23). In Krishnan's system, it appears that 
all packets are scanned (i.e. the ones of interest and the ones not of interest). However, it is not claimed 
that the ones not of interest are not scanned . Therefore. Krishnan's system shows that the processor is 
capable of scanning received packets that are of interest and either discarding them or alerting the user 
to a potential rogue program. In considering the packets that are not of interest being sent to the end- 
point computer, it is inherent that the packets are sent to the end-point computer because the job of the 
modem is to receive packets and send them to the end-point computer and they are not of interest so 
they will not be discarded or alert the user of a potential rogue program. 

(E) Applicant contends that Krishnan teaches away from Makinson. 

In considering (E), the Examiner respectfully disagrees. Makinson was brought in to teach an 
improvement of the system of Krishnan. It appears that Krishnan's system scanned for all incoming data. 
Makinson shows a more flexible solution and scans for only certain types of application layer protocols. 
The advantage that Makinson provides is a faster scanner because only the packets with protocols of 
interest are scanned and not every single packet. 
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